This vulnerability (CVE-2025-40897) in Nozomi Networks Guardian involves incorrect authorization (CWE-863) within the Threat Intelligence functionality. Specifically, users granted only view-only privileges can bypass access controls and execute administrative actions, potentially modifying rules or impacting service availability. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no user interaction, and high impact on integrity and availability. The vendor has not provided an official fix or remediation level, and the product is not a cloud service, so remediation depends on vendor updates.

An attacker with authenticated view-only access can escalate privileges within the Threat Intelligence module to perform administrative tasks. This could lead to unauthorized changes in rules configuration or disruption of the Threat Intelligence service availability. The integrity and availability of the affected component are at high risk. There is no evidence of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict user privileges carefully to prevent unauthorized access. Monitor for vendor updates regarding patches or mitigations. No vendor advisory or temporary fix is currently available.